Paul Payne
e25b07126c
Patch/minor bumps: - akaunting: 3.1.21 -> 3.2.3 - aptly: 1.6.2 -> 1.6.3 - baserow: 2.2.2 -> 2.4.1 - crowdsec: v1.7.8 -> v1.8.1 - docker-registry: 3.0.0 -> 3.1.2 - etherpad: 2.2.7 -> 2.6.1 - headlamp: v0.42.0 -> v0.46.0 - headscale: 0.29.1 -> 0.29.5 - indico: 3.3.12 -> 3.3.14 - karrot: v17.4.1 -> v17.4.2 - keila: 0.17.1 -> 0.30.3 - lemmy: 0.19.15 -> 0.19.19 - loomio: 3.0.24 -> 3.12.0 - mastodon: 4.5.3 -> 4.7.3 - mautic: 7.1.2 -> 7.2.1 - memcached: 1.6.32 -> 1.6.45 - mobilizon: 5.2.3 -> 5.2.4 - nocodb: 2026.04.1 -> 2026.09.1 - open-webui: 0.9.5 -> 0.12.3 - outline: 1.8.1 -> 1.11.0 - peertube: 8.2.1 -> 8.2.4 - pixelfed: 0.12.7 -> 0.15.1 - pretix: 2026.5.1 -> 2026.8.0 - synapse: v1.144.0 -> v1.163.0 - traefik: v3.4.1 -> v3.7.16 - typebot: 3.17.1 -> 3.19.1 - vaultwarden: 1.37.1 -> 1.37.4 - writefreely: 0.15.1 -> 0.17.2 Multi-file updates for apps with workers/sidekiq/streaming: - mastodon (5 files), indico (3 files), karrot (4 files), lemmy (2 files), loomio (2 files), typebot (2 files), pixelfed (2 files), synapse (2 refs), pretix (2 refs), aptly (2 refs)
Mastodon
Mastodon is a free, open-source social network server based on ActivityPub. It allows you to run your own instance of a decentralized social media platform.
Version
This package deploys Mastodon v4.5.3 (released July 8, 2025).
Dependencies
- PostgreSQL: Database for storing application data
- Redis: Used for caching and background job queuing
Configuration
VAPID Keys
Mastodon requires VAPID (Voluntary Application Server Identification) keys for Web Push notifications. These keys use Elliptic Curve P-256 cryptography.
The Wild Cloud API automatically generates proper VAPID keys when you add the Mastodon app. No manual configuration is required!
Database
The database is automatically initialized with:
- Database:
mastodon_production - User:
mastodonwith auto-generated password - All necessary privileges granted
The db-init job handles creating the database and user, and automatically updates the user password if it changes.
Storage
Mastodon uses two persistent volumes:
- Assets (10Gi): Stores compiled assets and static files
- System (100Gi): Stores user uploads, media files, and other system data
Both volumes use ReadWriteMany access mode to allow multiple pods to access them simultaneously.
Components
Mastodon runs three separate services:
- Web (Puma): Main web server for the Mastodon web interface
- Streaming (Node.js): Real-time streaming API for live updates
- Sidekiq: Background job processor for async tasks
Access
After deployment, Mastodon will be available at:
The ingress automatically routes:
/api/v1/streaming→ Streaming service- All other paths → Web service
First-Time Setup
-
Add and deploy the app:
wild app add mastodon wild app deploy mastodon -
Generate and configure VAPID keys (see above)
-
Access your instance in a browser and create the first admin user account
-
Configure additional settings through the Mastodon admin interface
Security
All containers run as non-root user (UID 991) with:
- No privilege escalation
- All capabilities dropped
- Compliant with Pod Security Standards
Notes
- SMTP configuration is inherited from your Wild Cloud instance settings
- Database credentials are auto-generated and stored in your instance's
secrets.yaml - The Active Record Encryption keys are auto-generated for Rails 8.0.3 compatibility